A lot of people have the false idea that if they have antivirus (and even anti-phishing) solutions on their computer, they have nothing to worry about in regards to the vast array of threats online. This is considered a false sense of security, which is in fact worse than having no security on your computer at all. At least with zero security, you understand that you can be a target online.

This article is a perfect example. This one guy had Norton 360 and IE7, both of which are considered secure solutions. Granted, there are much more secure solutions than Norton 360 and IE7, but that’s not the point. The point is that this guy thought he was perfectly secure until he received a phishing email that bypassed both Norton’s and Microsoft’s security. This must make the email legitimate, right? Wrong. Even with security solutions (with updated definitions, of course) on your system, you always have to be on your guard for those threats that evade detection. Granted, it may be rare but then again, it only takes one time for you to lose your identity.

A Reg reader has produced screen shots that demonstrate a powerful phishing technique that’s able to spoof eBay, PayPal and other top web destinations without triggering antiphishing filters in IE 7 or Norton 360. Plenty of other PayPal users are experiencing the same ruse, according to search engine results.

Matty Hall, a London resident who runs a nightclub and record label, says he’s been careful to practice good PC hygiene. He runs Norton 360 and uses the latest IE version, which Microsoft has taken pains to lock down with a variety of safety features, including one that alerts users when they visit many spoofed sites. He’s also careful to examine the certificates that accompany financial sites he visits before logging in to them.[more]

Tags: Identity Theft, Defense in Depth